This Privacy Policy is issued in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”) of Mexico, while also incorporating core principles from the General Data Protection Regulation (“GDPR”) of the European Union, the California Consumer Privacy Act (“CCPA”), and privacy regulations relevant to jurisdictions in Asia, particularly the Act on the Protection of Personal Information (APPI) of Japan, and the Personal Information Protection Act (PIPA) of South Korea. By using our website or providing your personal information, you acknowledge and agree to the practices described in this policy.

1. Identity and Address of the Data Controller.

Promotora Turística Las Coloradas Yucatán, S.A. de C.V., commercially known as “Las Coloradas Parque Turístico“, with address at Calle 22, No. 40, Int. 15, Col. San Antonio Cinta, C.P. 97139, Mérida, Yucatán, Mexico, is the entity responsible for the processing of your personal data.

Note: Las Coloradas Parque Turístico is part of Grupo Roche. Data protection practices are aligned with the group’s principles. You may consult Grupo Roche’s general privacy notice here: Grupo Roche Privacy Policy.

2. Data We Collect

We may collect the following types of personal information:

• Full name
• Email address.
• Phone number.
• Contact and location information.
• Billing or tax-related details.

Additionally, we may collect financial or payment information, such as:

• Credit or debit card numbers (via a third-party provider)
• Información para facturación.

Important: Online payments are processed directly through a third-party platform (EvoPayments or any other designated provider). This provider operates independently and is responsible for their own data handling practices. Their privacy policy is available here: https://evopayments.mx/politica-de-privacidad/.

3. Purposes of Data Processing.

Primary purposes:

• Manage and confirm online tour reservations.
• Process payments through our website.
• Issue invoices or receipts for transactions.
• .

Secondary purposes:

• Send promotional offers or updates.
• Conduct customer satisfaction surveys.

Improve services and usability of our website. You may opt out of secondary uses by emailing: hola@lascoloradas.com.mx.

4. User Responsibility and Consent.

By providing your data, you confirm that all information is accurate and legitimate. If you provide data about third parties (e.g. companions, beneficiaries), you confirm you have informed them and obtained their consent.

Continued use of our website constitutes your acceptance of this Privacy Policy.

5. Data Sharing and Transfers.

We may share your personal data with:

• EvoPayments (or equivalent platforms) for secure payment processing. https://evopayments.mx/politica-de-privacidad/ ).
• Government authorities as required by law.
• Third-party vendors under service contracts aligned with our privacy obligations. We do not sell, rent, or commercialize your data to third parties. All transfers will comply with applicable regulations.

If you are a resident of Japan or South Korea, we will handle your personal data in accordance with the requirements of the APPI and PIPA, including:

- Providing clear purposes for data use.
- Obtaining prior consent for international transfers when required.
- Ensuring the third parties that receive your data meet equivalent privacy protection standards.

6. Limiting Use and Disclosure.

If you wish to limit the use or disclosure of your personal information not essential to our service relationship, please send a request to: hola@lascoloradas.com.mx.

7. Consent Withdrawal.

You may withdraw your consent to data processing at any time by emailing hola@lascoloradas.com.mx.

This does not apply to data processing required for fulfilling legal or contractual obligations and has no retroactive effects.

8. Your Rights (ARCO & Global Equivalents).

Under Mexican law and international privacy frameworks, you may:

• Full name
• Access your data.
  Rectify inaccurate or incomplete data.
• Cancel (delete) your data when appropriate.
• Object to specific processing activities.

If you are a resident of Japan or South Korea, you are additionally entitled to:
- Request disclosure of the purpose of use.
- Request suspension or deletion of your data where there is improper handling.
- Request cessation of third-party transfers without consent (except where otherwise allowed by law).
- To exercise your rights, email us at hola@lascoloradas.com.mx with:
- Full name.
- Description of the data in question.
- A method of contact.
- Valid government-issued ID.
- We will respond within 20 business days and, if applicable, comply within 15 additional days.

9. Complaints and Oversight.

If you believe your data rights have been violated, you may file a complaint with Mexico’s data protection authority (INAI): https://home.inai.org.mx. Residents of Japan may also contact the Personal Information Protection Commission (PPC), and residents of South Korea may contact the Personal Information Protection Commission (PIPC).

10. Cookies and Tracking Technologies.

We use cookies, web beacons, and similar technologies to enhance user experience, analyze usage trends, and improve services. You may manage cookies via your browser settings.

This website may contain links to third-party websites. We are not responsible for their data processing practices.

11. Changes to This Policy.

We reserve the right to amend this Privacy Policy at any time. Updates will be published at: www.lascoloradas.com.mx.

12. Contact.

If you have any questions or wish to exercise your rights, contact us at:

.

. hola@lascoloradas.com.mx.